Media
d3c4b62b-c8b1-40b8-b250-d9da94208c62
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Alta
a596c9c4-ceb4-470c-8ad5-986cd62da91e
Ad Inserter < 2.7.11 - Authenticated (Admin+) Remote Code Execution
Crítica
CVE-2022-0349
NotificationX <= 2.3.8 - Blind SQL Injection
Media
CVE-2022-0448
CP Blocks <= 1.0.14 - Authenticated Stored Cross-Site Scripting via License ID settings
Alta
CVE-2021-25087
Download Manager <= 3.2.34 - Sensitive Information Disclosure
Media
CVE-2021-24953
Advanced iFrame <= 2021.9 Reflected Cross-Site Scripting
Media
CVE-2021-24825
Custom Content Shortcode <= 4.0.1 - Authenticated Arbitrary File Access / Local File Inclusion
Media
CVE-2021-24824
Custom Content Shortcode <= 3.8.8 - Unauthorised Arbitrary Post Metadata Access
Media
CVE-2022-0389
WP Time Slots Booking Form <= 1.1.62 - Stored Cross-Site Scripting
Media
CVE-2021-24826
Custom Content Shortcode <= 4.0.1 - Authenticated Stored Cross-Site Scripting
Media
CVE-2022-23180
Contact Form & Lead Form Elementor Builder < 1.7.4 - Arbitrary Settings Change
Crítica
CVE-2022-0434
Page Views Count Plugin <= 2.4.14 - Unauthenticated SQL Injection
Media
CVE-2021-25098
Easy Pricing Tables <= 3.1.2 - Arbitrary Post Removal via Cross-Site Request Forgery
Media
CVE-2022-0426
Product Feed PRO for WooCommerce <= 11.2.1 - Reflected Cross-Site Scripting
Alta
CVE-2021-24952
Conversios.io - Google Analytics and Google Shopping plugin for WooCommerce <= 4.6.1 Authenticated SQL Injection
Media
CVE-2021-24821
Cost Calculator <= 1.5 - Contributor+ Stored Cross-Site Scripting
Alta
CVE-2021-24820
Cost Calculator <= 1.8 - Authenticated Local File Inclusion
Crítica
CVE-2022-0441
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
Alta
CVE-2022-0383
WP Review Slider < 11.0 - SQL Injection
Alta
CVE-2021-24959
WP Email Users <= 1.7.6 - SQL Injection
Crítica
CVE-2022-0412
TI WooCommerce Wishlist / TI WooCommerce Wishlist Pro < 1.40.1 - Unauthenticated SQL Injection
Media
CVE-2021-24977
Use Any Font <= 6.2.0 - Unauthenticated Arbitrary CSS Appending
Media
CVE-2022-0345
Better Notifications for WP <= 1.8.6 - Email Address Disclosure
Media
CVE-2022-0380
Fotobook <= 3.2.3 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.